CVSS 8.4 · High EPSS 0,15%
Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 8.4 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_probe() stores the newly allocated eptdev in the default endpoint's priv pointer before calling rpmsg_chrdev_eptdev_add(). If rpmsg_chrdev_eptdev_add() then fails, its error path frees eptdev while the default endpoint may still dispatch callbacks with the stale priv pointer. Avoid publishing eptdev through the default endpoint until rpmsg_chrdev_eptdev_add() succeeds. Messages received before the priv pointer is published should be ignored by rpmsg_ept_cb(). Flow-control updates can hit rpmsg_ept_flow_cb() in the same window, so make both callbacks return success when priv is NULL.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 5.18 hingga sebelum 6.1.178 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.144 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.95 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.18.38 |
| linux | linux kernel | Versi 6.19 hingga sebelum 7.1.3 |